Vulnerabilities > Gopiplus > Horizontal Scrolling Announcement > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-09-16 CVE-2023-5001 Cross-site Scripting vulnerability in Gopiplus Horizontal Scrolling Announcement 9.2
The Horizontal scrolling announcement for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'horizontal-scrolling' shortcode in versions up to, and including, 9.2 due to insufficient input sanitization and output escaping on user supplied attributes.
network
low complexity
gopiplus CWE-79
5.4